Efficient implementation of bipartite nonlocal unitary gates using prior 
entanglement and classical communication 
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Any bipartite nonlocal unitary operation can be carried out by teleporting a quantum state from 
one party to the other, performing the unitary gate locally, and teleporting a state back again. This 
paper investigates unitaries which can be carried out using less prior entanglement and classical 
communication than are needed for teleportation. Large families of such unitaries are constructed 
using (projective) representations of finite groups. Among the tools employed are: a diagrammatic 
approach for representing entangled states, a theorem on the necessary absence of information at 
certain times and locations, and a representation of bipartite unitaries based on a group Fourier 
transform. 

PACS numbers: 03.67.Ac 



I. INTRODUCTION 

Teleportation [l[ makes possible a wide variety of 
nonlocal quantum processes provided sufficient prior 
entanglement and classical communication are avail- 
able. To change the quantum state of two systems 
A and B separated in space it is only necessary to 
teleport the A state to the laboratory where B is 
located, carry out the desired operation, and tele- 
port the result back again. The present paper is 
concerned with certain types of operations, nonlocal 
unitaries, which can be achieved at lower cost, in 
particular less prior entanglement than is needed for 
two-way teleportation. 

Protocols of this sort for qubits were developed by 
Eisert et al. @ and Reznik et al. Q, and our work 
builds upon theirs. See f° r other determin- 

istic and probabilistic protocols. We only consider 
the deterministic case in which the desired unitary is 
carried out with probability 1; finding efficient pro- 
tocols that allow for some noise is a challenging prob- 
lem not addressed here. While our protocols can be 
applied to an arbitrary nonlocal unitary, only in spe- 
cial cases are they more efficient than teleportation. 

There are two separate motivations behind stud- 
ies of the sort presented here. First, it seems likely 
that nonlocal operations will play a significant role 
in future quantum computers, especially schemes 
for distributed computation [20l - |23l |. and achieving 
them using prior entanglement is an option that de- 
serves consideration. Since producing entanglement 
is likely to be expensive, there is an obvious advan- 
tage to protocols which use as little of it as possi- 
ble. By comparison, classical communication is usu- 
ally thought of as cheap, since it does not have to 



be protected from decoherence. However, protocols 
that minimize its use might still have an advantage 
over those that require more. 

A second motivation is the desire to better under- 
stand the role of different types of quantum infor- 
mation [2~ij in various information-processing tasks. 
General nonlocal unitaries require physical influ- 
ences to propagate from one side to the other, in 
fact in both directions, and one would like to under- 
stand these in rational terms rather than by invok- 
ing quasimagical "collapses" and the like. It turns 
out that unitary operations place particularly strin- 
gent conditions on the presence or absence of differ- 
ent types of information at different locations and 
different times throughout a protocol, and knowing 
what these are can provide insight into why certain 
gates and measurements need to be employed rather 
than others. In this respect our analysis represents 
an advance over earlier work. 

Our protocols are based upon expanding a nonlo- 
cal unitary on Ha <8> Hb in the form 
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where the Hilbert spaces Ha, Hb have finite dimen- 
sions d,A,dB respectively, the Aj operators satisfy 
special conditions, or are of a particular type, and 
the expansion coefficients Bj, obviously constrained 
by the requirement that IA be unitary, may have ad- 
ditional special properties. In the simplest situation 
of "controlled" unitaries, the one easiest to under- 
stand in information-theoretic terms, the Aj form 
a projective decomposition of the identity on Ha, 
and the Bj are arbitrary unitaries on Hb- A more 
complex, but also more general case is unitaries of 
"group" form (or "group- unitaries" ) , when the Aj 
are unitary operators that form a representation, 
possibly a projective representation, of a group G, 
and the sum in (TTJ) is a sum over elements in this 
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group. Here the Bj may also be proportional to uni- 
tary operators forming a (projective) representation 
of the same group G, but that is not a requirement 
of our protocol. Actually any bipartite unitary can 
be written in this form with some suitable choice of 
the group G, thus the term "group-unitaries" should 
be regarded as describing the form of expansion of 
U, rather than a property of U itself. There is some 
relationship between our use of groups for nonlocal 
unitaries and the protocol of Klappenecker et al. [25[ 
for implementing local unitary gates. 

The remainder of this paper is organized as fol- 
lows: Sec. |TT] indicates the general strategy for our 
protocols, shows through a diagrammatic approach 
why groups are useful, establishes an information 
theorem that is useful when discussing unitaries, and 
a lower bound on how much entanglement is needed. 

The discussion of particular protocols begins in 
Sec. Mil with controlled unitaries that generalize Q 
and are easily understood in information-theoretic 
terms. The presentation of the main group- unitary 
protocol in Sec. IIVI begins with a general definition 
and a quantum circuit, followed by a detailed anal- 
ysis in Sec. HVBI of why the protocol works. A pro- 
cedure related to group Fourier transforms is used 
in Sec. IIV CI to give a general parametrization of 
unitaries which can be realized in this fashion. A 
particular case in which the A and B systems are 
treated in a symmetrical fashion is the subject of 
Sec. HVDl and in Sec. IIV El it is shown that the con- 
trolled unitaries of Sec. IIIII can be rewritten in the 
group form in an efficient way. 

Several specific examples of nonlocal unitaries are 
presented in Sec. [V] This is followed by a summary 
of the paper in Sec. IVII which notes some issues 
deserving further study. The appendices contain 
proofs and other subsidiary material. 



II. GENERAL COMMENTS 

A. Overall structure of protocols 

The protocols discussed in this paper all have a 
common structure indicated schematically in Fig. [T] 
The two parties share an entangled state on ancil- 
lary systems a and b. Alice performs a unitary gate 
T on systems a and A, followed by a measurement of 
the a system. She sends the (classical) measurement 
result to Bob, who uses this to determine which uni- 
tary U to carry out on b and B. Bob then measures 
the b system and sends the result back to Alice, who 
uses this information to choose a unitary V carried 
out on A. It is worth noting that the straightfor- 
ward teleportation protocol mentioned in Sec. U can 
also be represented using Fig. [T] provided the initial 
entangled resource is large enough to allow telepor- 



tation in both directions. (We leave as an exercise to 
the reader working out the details of the unitaries T, 
U and V needed to achieve this.) Such protocols are 
inherently asymmetric in that one party has to take 
the first step, while the second party acts according 
to the information received from the first party. 



B. Why groups are useful 

Our most powerful protocols are based on expan- 
sions of the desired nonlocal unitary U in terms of 
a matrix representation of a finite group. Indeed, 
all unitaries can be expanded in this way. Here, we 
explain why groups are useful utilizing an intuitive 
and visual presentation involving diagrams [2H [27| , 
from which as an additional benefit we will gain in- 
sight into one of our most important contributions, 
that unlike in previously published protocols, the 
Schmidt rank N of the entangled resource can be 
chosen independently of the dimensions (La , ds of 
Hilbert spaces "Ha, %b on which U acts. We note 
that it was by using these diagrams that we discov- 
ered the first of our protocols, which uses a uniformly 
entangled state to implement unitaries of the form 

N-l 

W=E C W)®^(J). ( 2 ) 
j=o 

with {U(j)}, {V(j)} two sets of unitaries, and the 
operators U{j) <g> V{j) form an ordinary representa- 
tion of a group. All other protocols based on groups 
were then discovered as generalizations of this one. 

The idea underlying our diagrams is that the pres- 
ence of entanglement on systems a, b effectively cre- 
ates multiple images of the states of other systems, 
in our case, A and B (see [2g, l27[ for detailed dis- 
cussion of these ideas). That is, the state 

|$) ® |*) oc f ^ \j)a\j)b^ <8> |*), (3) 

with |<E>) on systems a, b and |W) on A, B, can be 
represented by the diagram shown in Fig. [5] 

Given the way these images are distributed 
through the diagram, it is clear that Alice and Bob 
independently have "access" to each of the individ- 
ual images, and by performing controlled unitaries, 

E5 1 li>-01 ® U(j) and E.to 1 ® V(j), on 

each side, can together attach to each image one 
of the operators appearing in the terms of the sum 
for U in What we ultimately want is a partic- 
ular linear combination of all these terms. To see 
how to accomplish this, note that a measurement 
on a with outcome j picks out a single row of the 
diagram, and thus a single image. On the other 
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FIG. 1. A prototypical circuit diagram for local implementation of nonlocal unitaries 
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FIG. 2. Box diagram illustrating how entanglement creates multiple images of the state |*} distributed along the 
diagonal of the box. 



*0 


*1 


*2 









FIG. 3. Result of projection onto the state |+} a following 
their respective controlled unitaries. 



hand, a measurement outcome |+) a = Y^j=o^ \ j)ai 
places a sum of all the rows into a single row, which 
will appear as in Fig. [3] (all other rows disappear- 
ing), with each column containing one of the terms 
= (U(j)®V(j))\V). Similarly, if Alice measures 
a in the Fourier basis (or equivalently, performs a 
discrete Fourier transform on a and then measures 
in the standard basis), then for any outcome the di- 
agram is collapsed into a single row, with each col- 
umn containing one of the terms multiplied by 
a phase factor. These phase factors, e i?J , can easily 



be removed by Bob performing ^f^ 1 e~ l ^ j \j)b(j\ 
on system b leaving, for all outcomes of Alice's mea- 
surement on a, the diagram in Fig. [31 

The next step is for Bob to make a measurement 
of his own on system b, designed to place the fac- 
tors c(j) on the appropriate images and to take lin- 
ear sums of these terms, collapsing the diagram fi- 
nally into a single small box. If he first performs 
a unitary C, the first row of which is given by 
^^Jy 1 c(j)|0)b(j|, and then measures in the stan- 
dard basis with outcome corresponding to state |0)b, 
the result will be precisely the desired unitary oper- 
ation, 

N-l 

U\V) = J2 c U)\*i)- (4) 
j=o 

The question is how to complete this unitary, C. 
Clearly, we cannot simply copy the first row into 
all the others, as the rows of a unitary matrix must 
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all be mutually orthogonal, even though this would 
produce (|4]) for every outcome of Bob's subsequent 
measurement. One possibility that turns out will 
always work (see Sec. UVDj) is to choose all the other 
rows of C as permutations of its first row. This 
choice does not automatically yield (@|, however, but 
we instead obtain 



U'VS) 



N-l 

E c ( n 0'))l^ 



(5) 



where II(j) represents the permutation for the given 
outcome and U' =/= U, implying that our protocol has 
failed unless we can find a way to correct it. Such 
a correction is certainly possible if there exist local 
unitarics on T-LaiWb that together transform 
to \^u(j)), and hence W into U. This is where the 
notion of groups enters the picture. Indeed, recall- 
ing that |%) = (U(j) ® V(j)) |*), then if Alice and 
Bob perform U(k) ® V(k), and can choose k such 
that U(k)U(j) = U(U(j)) and V(k)V(j) = V(Il(j)) 
with n(j) corresponding to the multiplication table 
of a group G, then this transforms 14' into U and 
we have successfully, and deterministically, imple- 
mented U. See Sec. IIVDI for further details. Note 
that the requirement expressed in the previous dis- 
cussion is that U, V each form a representation of 
the group G. One could consider the possibility 
that they are non-unitary representations, but the 
corrections just described would then not generally 
be possible deterministically. Therefore, we consider 
only unitary representations in the sequel. 

Finally, we note that it should be clear from this 
discussion that N can be chosen as a completely in- 
dependent quantity; in particular, there is no reason 
for it to be constrained by the values of cLa or ds, 
as has been the case in previously known protocols. 
Hence, the amount of entanglement needed to im- 
plement a given nonlocal unitary depends only on 
the form of the unitary itself — in particular for our 
protocols, on the possible ways it can be expanded 
in terms of a group — and not on the size of the local 
Hilbert spaces upon which it acts. 



C. Information location 

To understand various aspects of our protocols, 
it will be useful to "quantize" the circuit in Fig. [TJ 
by replacing measurements and classical communi- 
cation with appropriate controlled unitaries, Fig. [4] 
An easy way of seeing the equivalence of the two 
circuits in terms of their action on systems A and 
B is to imagine that the ancillary systems in Fig. @] 
are measured in the standard basis at a time cor- 
responding to the right side of the diagram. Then 
using the fact that quantum measurements reveal 



pre-existing properties when one employs an appro- 
priate framework [30j | . one can infer that systems 
a and b were in the states indicated by these out- 
comes, \l) and |m) respectively, before the measure- 
ments took place and thus also at times preceding 
the controlled operations, i.e., at the times when the 
measurements in Fig. [T] took place. 
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FIG. 4. Quantized version of Fig. \T\ 

While Figs. Q] and [4] are equivalent so far as A 
and B are concerned, the latter is simpler to analyze 
in terms of certain information-theoretical ideas by 
using the following theorem. 

Theorem 1. If J is an isometry mapping a Hilbert 
spaceUR to a tensor product % r®% s> the following 
statements are equivalent: 

(i) J generates a unitary from Hr to itself in the 
sense that 



J\r) = (U\r)) \8 Q ), 



(6) 



with IA : %a T~La a, unitary operator and \sq) a 
fixed state (independent of \r) ) in Hs- 

(ii) There is no information about the initial state 
of R available in S after applying J . 

(hi) The Kraus operators {Kj} such that 



J\r) 



(7) 



for {\sj)} some orthonormal basis ofHs, are of the 
form Kj = CjW, with the Cj complex numbers and 
W a map from Hr to itself. 

By "no information" we mean that the final state 
of S is uncorrelated with the initial state of R, see 
[3lj , and thus no conceivable measurement on S will 
yield any information about the initial state of R. 
It is then obvious that (i) implies (ii) and (iii); the 
reverse inferences are proved in Appendix [A] 

To apply this theorem to the situation in Fig. @] 
let V be the unitary represented by this quantum 
circuit, |r) the initial state of the combined A and B 
system thought of as R, |$) the (fixed) initial state 
of a and b, which together constitute the system S, 
and 



J\r) :=V(|r) ® |*)). 



(8) 
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The theorem then tells us that if the circuit carries 
out a unitary U on Ha ® Kb it must be the case 
that no information about the initial state of AB 
can be found in the final state of the combined an- 
cillary systems a and b, and therefore none is present 
in either a or b at a time after the controlled gate 
that represents its final interaction with the rest of 
the system. We will see in Sec. IIIII how this ab- 
sence of information can be used to motivate the 
choice of certain parts of a circuit to carry out non- 
local unitaries. Of course at a time before the fi- 
nal controlled interactions, the ancillary systems are 
(in general) correlated with, and thus contain in- 
formation about, the rest of the system; it is only 
after the final interactions, the choice of which is 
constrained by the need to remove this information 
from the ancillas, that they are in an appropriate 
sense of the term "information- free" . Since the mea- 
surement outcomes in Fig. [T] are exactly the same as 
if the measurements were carried out at the end of 
the time interval shown in Fig. [4j we see that such 
outcomes cannot contain any information about the 
input AB. On the other hand, there certainly ex- 
ist measurements that Alice could carry out on a 
that would indeed reveal information about the in- 
put state of AB, and in that case we cannot im- 
plement deterministically a unitary U on Ha ®Hb- 
Conversely, if there is no information about the AB 
input in the final state of the ancillaries, then the 
circuit in Fig. 21 and hence its counterpart in Fig. [TJ 
will necessarily result in a unitary map of the AB 
input to the AB output. 

Statement (iii) of the theorem provides an alterna- 
tive way of deciding if a circuit implements a unitary 
on R. Suppose the whole circuit is (or is equivalent 
to) a unitary followed by a measurement in an or- 
thonormal basis of Kg. If for every measurement 
outcome the corresponding Kraus operator on R is 
proportional to the same operator, then the circuit 
deterministically implements a unitary on R. Check- 
ing this may be easier than working out the entire 
state evolution for an arbitrary initial state of R. 



D. Bounds on resources 

The theorem that follows provides a very general 
lower bound on the amount of entanglement resource 
needed to implement a nonlocal unitary. By the 
Schmidt rank (sometimes called "Schmidt number" ) 
32] of a bipartite operator on Ha ®Wb we mean 
the minimum number of terms in an expansion of 
the operator as a sum of products of operators on 
the separate systems, or, equivalently, the rank of 
the matrix of coefficients when the operator is 
expanded in the form J^ij CijAi <g> Bj with {A{\ and 
{Bj} bases for the operators on Ha and Hb- Either 



definition has an obvious counterpart in the Schmidt 
rank of a bipartite pure state. There are various 
ways of defining the "entanglement" of a bipartite 
unitary operator. For our purposes a useful one is 
the entangling strength [33j of the unitary Uab de- 
fined as the maximum entanglement of a state on 
H a a ® K B § produced by letting Uab ®Ia®^b ac * 
on a product state Ic)^ ® \t)bb, where A and B 
are ancillary systems, and (cr)^ and \r) B g are ar- 
bitrary entangled states. By the entanglement of a 
pure state we mean the usual measure — Y^, Xj log Xj 
in terms of its (squared) Schmidt coefficients Xj . 

Theorem 2. To generate a bipartite nonlocal uni- 
tary U using an entangled resource |$) and separa- 
ble quantum operations [34], which include local op- 
erations and classical communication (LOCC), the 
Schmidt rank of |$) cannot be less than the Schmidt 
rank of 14, and the entanglement of |<fr) cannot be 
less than the entangling strength oflA as defined pre- 
viously. 

The proof will be found in Appendix [B] The sec- 
ond assertion remains true if "entanglement" and 
"entangling strength" both refer to some other en- 
tanglement monotone [35j . 

The idea behind the second part of Theorem [5] is 
that entanglement cannot increase on average un- 
der LOCC. Using the same idea, the entanglement 
that a bipartite unitary can generate for any partic- 
ular input product state provides a lower bound for 
the entanglement needed to implement this unitary. 
The entanglement that unitaries of the form ([2]) can 
generate for the input product state \Q)a ® |0)b has 
effectively been studied in [36[ . 



III. IMPLEMENTING CONTROLLED 
UNITARIES 

In this section we consider bipartite controlled 
unitaries of the form 

N-l 

U=Y, P i® V h ( 9 ) 

0=0 

where the Pj's form a (projective) decomposition of 
the identity on Ha, while the V}'s are arbitrary uni- 
taries on Hb- All the essential ideas can be under- 
stood assuming the Pj's are of rank 1 (i.e., onto pure 
states) and this is assumed in the exposition that fol- 
lows, with some remarks toward the end about the 
extension to a more general situation [see the mate- 
rial associated with ([To])]. 
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FIG. 5. Z-information protocol when Pj in @ projects onto |j)a- The j label appears twice, reflecting the fact that 
the Z type of information about system A is transmitted to system b. 
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FIG. 6. Quantized upper left part of Fig. [SJ and an effectively equivalent diagram. 



A. Description of the protocol with rank-1 
projectors Pj 

Let Ha be of dimension N and Pj a projector 
onto \j) in the standard basis. Then the circuit in 
Fig. [5] represents a straightforward generalization of 
the N = 2 protocol of [2] to arbitrary N. The en- 
tangled resource is 



JV-l 

!*>«* = 7= £|*>®I*>- 

^ fe=0 



(10) 



For general N define the X and Z gates using 

X\k) = \k-l); Z\k) = e 2mk/N \k), (11) 

with subtraction understood as mod N, so one has 
the usual Pauli operators when N = 2. The first 
controlled- A J gate in the figure means that if Ha is 
in the state \j), then X J , meaning X to the power 
j, is applied to the a system. Then Alice performs a 
measurement on a in the standard basis, and sends 
the result / to Bob, who applies X 1 to b. This is 
followed by a controlled-^ gate, © with b replacing 
A as the control, on b and B. Then comes a Fourier 
transform 



F 



mj 



,2-nimj /N 



m)(j\, 



(12) 



on 6, and a measurement of b in the standard basis. 
The outcome m is sent to Alice who carries out a 
Z m = Z~ rn correction, where Z is defined in (fTT)) . 



[The F gate could be other than (jl2|) ; see the discus- 
sion following (fT5|) .] This completes the protocol. 



B. Detailed analysis of the circuit 

To understand what is accomplished by the upper 
left part of the circuit in Fig. [5] it is helpful to first 
quantize it, see the discussion in Sec. Ill C[ and then 
show that the quantized version in Fig. [6ta) is effec- 
tively the same thing as that in Fig. [6jb). If A is 
initially in the state unitary time development 
in Fig. (nja) involves the two steps (we omit the nor- 
malization 1/y/N; note also that I in the figures is 
equal to k — j) 

\j) ® 1*) ® i fc ) -> b') ® i fc - ® 

Ij> ® (E l fc - i>) ® b') = b') ® (E l fc )) ® IJ)- 

k k 

(13) 

Thus at the end of these two steps we have a prod- 
uct state on T-LAb ® H a , with the H a part in the 
state |+) = \k), independent of j. So (ii) of The- 
orem [T] is satisfied partially: there is no information 
about A in a at the end of the time interval shown in 
Fig. |5Ka) . One might think of the second controlled- 
X- 7 gate as serving to "erase" the information about 
A present in a at the intermediate time. Erasing 
the information makes use of the fact, which justi- 
fies the final equality in (TT3|) . that addition modulo 
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FIG. 7. Reduced diagram of the Z-information protocol 



N is a group, and for any finite group a sum over 
the group elements g is the same as a sum over gh 
with h fixed and g/i the group product. In Sec. IIVI 
below, we employ this strategy using a more general 
group. 

As demonstrated in (113)) the net result of the up- 
per left part of the circuit in Fig. [5] is to copy the 
value of j in \j)a from Ha to Hb, precisely what 
one finds in Fig. [BJb). This is the first step in what 
is sometimes called "one bit teleportation" [37} , and 
amounts to copying a particular type of quantum in- 
formation, the Z type or its generalization to N > 2 
in the notation of [24j . from A to b. The nonlocal 
operation in Fig. |UJb), an isometry from A to the 
combined A-b system, is what is effectively accom- 
plished by the first steps of the protocol, including 
the classical communication which is essential for ac- 
tually transferring the information from Alice's lab- 
oratory to Bob's. (Note, however, that the infor- 
mation is not contained in the "classical" outcome 
of the measurement, but resides in correlations be- 
tween this outcome and system b; see the analysis in 
38].) 

When we replace the upper left part of the circuit 
in Fig. [5] with Fig.^b) and quantize the remainder, 
the result is Fig. [71 where the unitary time develop- 
ment following the controlled- V gate takes the form, 
assuming an initial AB state \j) ® \B): 

\j) ® |i) ® VAB) -+ £(<m|F|j>) \j) ® \m) ® Vj\B) 

m 

-> $3(<m|F|j))z m |j) ® |m) ® 

m 

(14) 

For a successful unitary it is necessary, see the dis- 
cussion in Sec. Ill CI following Theorem [TJ that the 
final state in (|T4"|) be a product of a pure state on %b 
times another on Hab- This can be achieved if we 
assume that 



Z m \j)=c(m\F\j)- 1 \j), 



(15) 



since the right hand side of (fT4")) will then be of the 
desired form c\j) ® ^X) m l TO ^ ® V,|S). But for Z n 



in (|15l) to be a unitary it is necessary and sufficient 
that the unitary operator F be such that all its ma- 
trix elements in the standard basis are of magnitude 
1/vN, and then |c| = 1/y/N as well. There are 
many possibilities for such a unitary matrix, but one 
obvious choice is the Fourier transform in Eq. (fT2|) . 
and then Z m = Z~ m , with Z defined in (JTTJ . Us- 
ing this or some other appropriate choice for the F 
and Z m gates will result in a final state, Fig. [Jj of 
\j) ® |+) ® V^l-B), if the initial AB state is \ j) ®\B). 
By linearity this extends to any other initial AB 
state. 



C. Generalization to projectors Pj of higher 
rank 



Minor and fairly obvious changes are all that is 
needed to extend the discussion from rank 1 to 
projectors Pj of general rank in ([9]). First, the 
controlled- A- 7 gates in Figs. [5] and [51 both (a) and 
(b), should be replaced by the unitary operator 



(16) 



where the Pj act on Ha, & space of any dimension 
greater than or equal to N, and addition is mod N. 
Second, the final Z m gates in Fig. [5] now take the 
form 



Z m = J2^N{m\F\j)- x P j = J2' 



— 2-nijm j N 



Pi 



(17) 

where the right side is what results when F is the 
Fourier transform (1121) . The argument that this will 
produce the nonlocal unitary U then follows exactly 
the same steps as before. 

The collection of commuting projectors {Pj} can 
very well be thought of as representing a certain type 
of information in the notation of |24j |. namely the 
type that answers the question as to which of these 
properties, which j, is true. Let us refer to this again 
as "Z information". Then the generalized protocol 
functions in essentially the same way as when the 
Pj are of rank 1: The Z information is copied onto 
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the b system by a process that resembles one step in 
teleportation, here it is used to "choose" which Vj is 
to be carried out, and then erased off the b system 
by a process which amounts to applying a unitary 
correction to A. 

A point worth making, since it will come up again, 
is that while the success of the protocol, and thus 
the type of unitary that can be implemented this 
way, depends upon precise details of the ancillary 
systems a and 6, it only depends upon A and B in 
a more general way: operators on the latter pair 
of systems must satisfy certain algebraic conditions, 
but are not otherwise constrained. In the case at 
hand the operators on Ha must be a family of com- 
muting projectors that sum to the identity, while on 
Hb they must be unitaries. Beyond this there are 
no requirements, which in particular means that the 
dimensions of Ha and Hb can be arbitrarily large 
compared to N. 

IV. PROTOCOLS BASED ON A FINITE 
GROUP 

A. Introduction to the group form of unitaries 

The protocols discussed in this section are based 
on the use of a finite group G, elements f,g, and so 
on, identity e, group multiplication indicated by fg, 
in general not equal to gf. We shall want to consider 
cases in which a unitary Wona tensor product Ha <8> 
Hb can be expressed in the form 

fee 

where the unitary operators U (/) on Ha form a 
finite-dimensional projective representation of G in 
the sense that for all / and g 

U(f)U(g)=»(f,g)U(fg). (19) 

Here the g) are nonzero complex numbers con- 
stituting a factor system; in our case they are of 
magnitude 1 because the U(f) are unitary. We shall 
sometimes have occasion to use p^|) in the form 

uHg)U(f) = n*(g,g- 1 f)U(g- 1 f), (20) 

whose validity can be checked by left multiplying 
both sides by U(g), the inverse of U^(g), and noting 
that (i*(f,g) = l/fi(f,g). As for our purposes it 
represents no loss of generality, we shall also assume 
that U(e) — I a, and consequently 

H(e,f) = n(f,e) = l,VfeG. (21) 

Naturally, an ordinary representation of G in which 
m(/j3) = 1 f° r every / and g is one possibility, but 



we will also consider examples in which the collec- 
tion {U(f)} constitutes a "group up to phases" with 
nontrivial phases. 

Figure [5] shows a circuit that will carry out the 
unitary U in (IT8l) with the help of a suitable entan- 
gled state, as discussed in detail in Sec. IIV Bl below, 
which gives sufficient conditions on W(f) so the pro- 
tocol will succeed. The relationship between U and 
the W(f) is analyzed further in Sec. IIV CI A par- 
ticular case in which each W(f) is proportional to 
a unitary V(/) representing the same group is the 
topic of Sec. IIVD1 while in Sec. IIV El we discuss the 
relationship of the expansion form (IT8l) with the con- 
trolled unitaries. 

Before proceeding, let us first give a brief descrip- 
tion of the circuit of Fig. [SJ Alice begins the pro- 
tocol by implementing a controlled set of unitaries, 
where system a in standard basis state |/) controls 
the unitary U(f), which operates on Ha- She then 
measures a in a basis unbiased to the standard basis 
and defined by unitary operator F, where by unbi- 
ased we mean that when represented in the standard 
basis, F must have all entries of magnitude | C | 1 / 2 . 
Next, Alice tells Bob the outcome h of that measure- 
ment, and he follows by performing diagonal unitary 
Z(h) on b, which has the effect of removing phase 
factors introduced by Alice's measurement. He then 
performs unitary M on bB (defined in (l30l) and ([31]) 
below), which introduces the operators W(f) of (TT51) 
in a way that is correlated with the U(f)'s of Alice's 
earlier operation, where these correlations are made 
possible by the initial entanglement between a and b. 
Bob then measures b in the standard basis and tells 
Alice his outcome, g. Alice completes the protocol 
with the "correction" U{gy on A, which adjusts the 
correlation between W's and C/'s so that the result 
is always equal to U [that is, so that W(f) is always 
tensored with U (/), rather than with U(f') for some 

B. Discussion of the circuit 

Now let us analyze this protocol in detail to un- 
derstand how and why it works. In view of linearity 
it suffices to analyze the circuit in Fig. [S] for a prod- 
uct input state \A) ® \B). The resource entangled 
state is 

|$) afe= * £1/)®!/), (22) 
VI G I fee 

where the kets represent orthonormal basis states 
labeled by elements of the group G introduced pre- 
viously. The first controlled gate means that if a is 
in the state |/), U(f) is carried out on Ha, while 
the other controlled operations are in response to 
results of measurements carried out in the standard 
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FIG. 8. Circuit diagram illustrating local implementation of nonlocal unitary U = U(f) <8> W(f), where the set 
of unitaries {U(f)} forms a projective representation of a group. 



basis. Before discussing the bipartite unitary M on 
Tib ®%b, it is helpful to replace the upper left part 
of the circuit in Fig.|5]by its counterpart in Fig.[5J in 
the same way in which the upper left part of Fig. [5] 
was simplified in Fig. [5] Thus after quantizing the 
circuit of Fig. [U one has as in Sec. IIIII — compare 
with (|14p — a unitary time development 

\A) <8 E l/> ® l/> E 17 (f)\A) ® |/) ® |/) 
/ / 

->E< ft ™ C7(/)|A> ® ® |/> 

M 

-> EW F l/> ^(/M ® W ® Wl/)- (23) 
M 

If we choose Z(/i) so that 

Z(/ l )|/)=c<ft|F|/)- 1 |/) 1 (24) 

the same strategy as in (|15p. the final term in (|23p 
is 

thus justifying the upper left part of Fig. [SJ where 
the ancillary system a no longer appears. The upper 
right part comes from quantizing the second mea- 
surement and classical communication in Fig.[8l just 
as in Sec. IIIII 

To analyze the circuit in Fig.[9]we begin by writing 
M in the block form 

M = J2\9){f\®{9\M\f), (26) 
f,g 

where (g\M\f) denotes an operator on Hb, not just 
a complex number. The unitary time development 
represented by Fig. |H] then takes the form 

|A)®El/>®l*> 
/ 

-> E U\g)U{.f)\A) ® \g) ® (g\M\f)\B). (27) 
f,g 



In order to have no information left in the b system 
at the final time — see Sec. |TT] and compare with the 
analogous discussion in Sec. [ill] — we need 

J2 u Hg)u(f)®(g\M\f) 
f 

^J2f I *^,9- 1 f)U(g- 1 f) ® (g\M\f) (28) 
/ 

to be independent of g, as then the right side of ([27| 
will factor into a product of ^2 Iff) on an d a P ur e 
state on T-La ®T-Lb, and we will have carried out a 
unitary operation on the latter. 

While the ^-independence of (|28j) by itself does 
not provide a strong constraint on the form of 
(g\M\f), it will be satisfied if we set 

(g\M\f)= l i(g,g- l f)W(g- 1 f), (29) 

and replace the sum over / with a sum over h = 
g- x f. With (g\M\f) in this form, may be 

rewritten as 

M = R(f) ® W(f), (30) 
fee 

where 

R(f) = J2f(9,f)\g){gf\, (3i) 

and the collection {i?(/)} forms a projective regular 
representation of G with factor system )J.(f,g); see 
p. 267 of [3i| and the comments here in Appendix [Dl 
By using the basis {\g}} of Tib one can view M 
as a matrix with blocks, where the (g\M\f) block is 
equal to W(g~ 1 f) multiplied by a phase £i(g,g -1 /)- 
The structure is most easily visualized for a triv- 
ial factor system fi(g, h) = 1 and G a cyclic group, 
in which case the blocks form a circulant matrix. 
For a more complex group structure, the rows of M 
are again related to each other by permuting the 
blocks, but now according to the multiplication ta- 
ble of (the non-cyclic) G. Because the U(f)'s repre- 
sent the group G, this structure of M makes it easy 
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FIG. 9. Circuit equivalent to Fig. [8] in terms of its action on Ha <8> Hb 



to correct for the different measurement outcomes g 
on b by doing a unitary correction U(gy on Ha as 
shown in Fig. [5] Each of these measurement out- 
comes "picks out" a different row of blocks in M, 
and U(gY effectively undoes the permutation of the 
blocks in that row to match each W(f) with the 
appropriate desired U(f). 

The left side of ([251) is independent of g and thus 
equal to its value when g = e. Inserting this on the 
right side of ((27)) gives a final state proportional to 



52U{f)\A)®\g)<8>{e\M\f)\B) 



f,g 



E 



U(f)\A)® (J2\9) )®W(f)\B) 



(32) 



which is the desired operation on Ha <8> Hb- Thus 
in conclusion: 

Theorem 3. If {U(f) : / £ G} is a projective 
representation of the group G with factor system 
fi(f,g), and the W(f) are such that M defined in 
POP is unitary, then the circuit in Fig. [#| deter- 
ministically implements the unitary transformation 
U = E/ eG u (f) ® W(f) on Ha ®Ub- 

The proof is a consequence of applying Theorem 
Q] to the circuit in Fig. H with H R = Ha®Ub, 
H s = H b , and J :Ha®U b -> U A ®U B ®U h cor- 
responding to the unitary operation produced by the 
circuit with the initial Hb state fixed. Since by the 
preceding analysis there is no information in Hb, © 
applies, which means a unitary IA is carried out on 
H A ®n B - The form of this U is £ /eG */(/) ® W(/) 
according to (|3"2"|) . Thus given W(f) such that M is 
unitary, the circuit will carry out the corresponding 
U. The inverse problem of finding suitable W(f) 
operators that give rise to a unitary M, for a given 
U, is the subject of the next subsection. 



C. Group Fourier transform 

To analyze unitarics U of the group form (fT8|) it 
is useful to employ the theory of irreducible repre- 
sentations, which is almost the same for projective 



representations as for ordinary representations with 
the trivial factor system fj,(f,g) = 1; see Ch. 12 of 
[39l ] for an accessible treatment. (The discussions 
there and in the following both assume that the un- 
derlying field for the vector spaces of concern is the 
complex number field C.) 

For a given group with a given factor system, there 
are a finite number n of inequivalcnt unitary irre- 
ducible representations {D^(f)} labeled by an in- 
teger A taking values from 1 to k, where D^(f) 
are d\ x d\ unitary matrices, which we shall as- 
sume fixed throughout the following discussion, with 
Sa=i = 1^1 = N. By choosing a suitable or- 
thonormal basis (independent of /) of Ha, the rep- 
resentation {[/(/)} can be written in the block di- 
agonal form 

u (f) = 00 dW (/) = E p < u w p < > ( 33 ) 

a=i n=i 1 

where the irreducible representation A occurs with 
multiplicity n\, and is absent from the sum when 
n\ = 0. The projectors Pi that sum to the identity 
Ia provide an alternative way of representing the 
blocks, each of which corresponds to a distinct value 
of I defined as the pair (A, 77), where 77 runs from 1 
to n\. 

Let us start with a special case U(f) of ((33 j) in 
which n\ = 1 for every A, that is, the representa- 
tion {£/(/)} contains each inequivalent irreducible 
representation exactly once. To represent the block 
diagonal structure we use an orthonormal basis in 
which each ket \Xj) carries two labels: A for the rep- 
resentation, and j an integer between 1 and d\, so 
that the matrix U(f) has the form 

(Xj\U(f)\X'k) = 6 xy D$(f) = S xy D(K,f). (34) 

Here D{K, f) is simply '(f) thought of as a ma- 
trix in which the rows are labeled by K — (A,j, k) 
and the columns by the elements / of the group G. 
It is a nonsingular \G\ X \G\ matrix (see further com- 
ments in Appendix [Cj) . and consequently its \G\ row 
vectors are linearly independent, and its \G\ column 
vectors are linearly independent. Since each column 
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corresponds to one of the U(f) matrices, we con- 
clude that the number of linearly independent oper- 
ators in the collection {U(f)}, the dimension of the 
linear space of operators on Ha that they span, is 
equal to \G\. In effect, column / of D is a "squashed" 
form of the matrix U(f), with the elements A 7^ A', 
which are in any case 0, omitted. 

Now suppose the representation {£/(/)} contains 
only some and not all of the irreducible represen- 
tations. Then (|34p holds with U(f) replaced with 
{/(/), but now some of the A's are absent, so the rank 
of the remaining part of the D matrix, the number of 
remaining rows, is equal to ^ A d\ for the remaining 
irreducible representations present in the collection 
{[/(/)}. If, on the other hand, some of the n\ arc 
larger than 1, which is to say {U(f)} contains some 
irreducible representation more than once, this cor- 
responds to duplicating some of the rows of D, which 
of course cannot increase its rank. Hence we arrive 
at the following: 

Theorem 4. The number of linearly independent 
operators in the collection {U(f)} forming a pro- 
jective representation of a group G is equal to the 
sum of the squares of the dimensions of the distinct 
inequivalent irreducible representations contained in 
{U(f)} [i-e. J2\ d\ for those A in (|33[) for which 
n\ is 1 or more]. In particular, the {U(f)} are lin- 
early independent if and only if all the inequivalent 
irreducible representations are present: n\ > 1 for 
every A between 1 and n. 

Of course the block diagonal structure (|33|) of the 
{U(f)} induces a corresponding structure in U, and 
again it is helpful to begin with the case in which ev- 
ery inequivalent irreducible representation is present 
exactly once, 



U = Y.U(f)®W(f) = (§Q 



x=i 



with each block 



qw = J2 D(x Hf)®w(f), 



(35) 



(36) 



a d\ds x d\ds unitary matrix, since each block of 
a block diagonal unitary is itself unitary. This can 
be written explicitly using matrix elements (after 
choosing any orthonormal basis oIHb) 



Q^k q = J2 D \k(f)w m (f), 



(37) 



and also schematically in the matrix notation intro- 
duced in (|34l) . 



(38) 



Q(K,L)=Y,D(KJ)W(f,L), 
f 



where K denotes (X,j,k), L denotes (p,q), D(K,f) 

is £$>(/), and W(f,L) is W m (f). 

The connection between and the W(f) can 
be thought of as a group Fourier transform whose 
inverse is, Appendix [C| 



IV,, 



>(/) = £#£ H } (f) 



(39) 



A=l 



This provides a convenient way of parametrizing the 
collection of operators W(f) for which U in ([53|) is 
unitary: the parameters are the elements of the 
matrices subject to the sole restriction that each ma- 
trix be unitary. As n 2 real parameters are needed 
to characterize an n x n unitary matrix, a total of 
Ea=i ^a^b = I^Mb rea l parameters characterize 
all possible IA unitaries of the type under discussion 
once the basis of Ha has been specified as noted 
previously. 

The special case n\ — 1 just discussed provides 
the key to understanding all other possibilities. Sup- 
pose some multiplicities n\ in (|33p are greater than 
1. Then both the U(f) and the corresponding 



u = Q(x) = J2 t P; ® u \ Pi ® h 



(40) 



A=l 77=1 



will contain some identical blocks, but the number 
of parameters is still the same: for each A one can 
choose only a single in (|39|) . [Note the product 
structure of the projectors appearing on the right- 
hand side of , which is a consequence of the fact 
that the U(f), which are the operators that repre- 
sent G, act only on Ha-] On the other hand, if some 
of the n\ in (|3"3"|) or (|4"0)) are zero, then whereas the 
number of parameters determining the W(/) is the 
same as before, altering the matrix elements in those 
Q< A ) which are no longer used in the sum (|33[) or (|40[) 
can have no influence onU. To put it a different way, 
when some irreducible representations arc missing, 
the collection U(f) is no longer linearly indepen- 
dent, Theorem 21 and hence U does not uniquely 
determine the W(f) in (|55). The right side of (gDJ 
should serve as a reminder that the block structure 
of U is induced by a decomposition of the identity 
on Ha, not Hb- 

The next theorem summarizes these results and 
also gives a characterization (|4ip of the W(f) that 
does not involve the group Fourier transform: 

Theorem 5. Let {£/(/)} be a projective unitary rep- 
resentation of a group G on Ha with factor system 
{/•*(/> flO}> $M > a collection of operators on 

H B ; andU = T, feG U (f) ® W (f)> G9- Th( ^ n 
(a) The following three statements are equivalent: 
(i) The operator M , defined in (|30p and shown 
in Fig. [21 is unitary. 
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(ii) The W(f) are given by 
lection {Q^} of unitary matrices 
(Hi) The W(f) satisfy 



for some col- 



Em 



(f,g)W\f)W(fg) = 5(e,g)I B , V 9 e G, 



( 41 ) 

where 6(e,g) is 1 if g is the group identity e and 
otherwise. 

(b) Each of the three statements in (a) implies that 
hi is unitary. 

(c) If Li is unitary and the U(f) are linearly inde- 
pendent, then all three statements in (a) hold. 

(d) If U is unitary and the U(f) are linearly de- 
pendent, so the W(f) are not uniquely determined 
by hi — ^2f eG U(f)®W{f), there exists at least one 
choice for the W(f) such that the statements in (a) 
are correct. 

This theorem, whose proof is in Appendix iDl im- 
plies that whenever a unitary hi can be expanded in 
the group form (TT8")) for some projective representa- 
tion {£/(/)} there is always some choice of {W(f)} 
that makes M unitary, so that hi is realized by the 
circuit in Sec. IIVBI 

The following corollary, whose proof follows im- 
mediately from (c), (a, hi), and (b) in Theorem [SJ is 
sometimes of use in constructing additional exam- 
ples. 

Corollary 6. Let {U(f)} and {U'(f)} be two pro- 
jective unitary representations of the same group 
G with the same factor system, and assume the 
{[/(/)} are linearly independent. The unitarity of 
hi = J2f U{f) ® W(f) then implies the unitarity of 

w = E f u'(f)®w(f). 

A comment on the relationship between hi and the 
matrix Q(K, L) of (1551) : the Schmidt rank of hi is the 
ordinary rank of Q{K, L) when rows corresponding 
to absent irreducible representations have been re- 
moved from the latter, a result that follows from the 
discussion in Sec. Ill Dl If an irreducible representa- 
tion is present more than once this corresponds to 
duplicated rows, which do not change the rank. In 
Sec. [V] we will sometimes find it useful to visualize 
the rows of Q{K, L) as the d B x d B blocks B^ Xjk "> 
whose matrix elements are 



B 



im = Q£L = Y.D%\f)W pq (f), 



jp;kq 



f 



(42) 



where the triple A, j, k labeling the block corresponds 
to the first argument K in Q(K,L), see (j3"5)) . and 
the indices p, q to the second argument L. Each 
block, , is just a "reshaping" of the K row of 

Q(K, L), so the (row) rank of the latter (and there- 
fore the Schmidt rank of hi) is equal to the number 
of linearly independent blocks B^ k ^ . 



In summary, we have shown that the protocol of 
Sec. IIVBI works for any bipartite unitary hi of the 
group form (fT8"|) , have given a complete parametriza- 
tion of such unitaries in terms of a set of unitary 
matrices, (|40|) . and have also given an explicit form 
for the corresponding W(f) matrices through (|39p. 
Conversely, if the W(f) satisfy (|4ip . or can be writ- 
ten in the form (1391) . the corresponding hi will be 
unitary and can be carried out using our protocol. 



D. Double unitary circuit 

A particular instance of the group form (1181) . an 
extension of the example considered in Sec. Ill Bl is 

U=Y J <f)U{f)®V{f) = Y J <f)TU), (43) 
feG feG 

where we assume the V(f) are themselves a projec- 
tive unitary representation of the group G with a 
factor system {v(f, g)} analogous to the g)} in 
(TT9"1) . This means that the r(/) also form a projec- 
tive representation of the same group with a factor 
system 



i(f,g) = Kf,g)v(f,g)- 



(44) 



In the circuit that carries out hi, the M gate of 
Figs. [5] and |H] consists of two controlled operations 
on Hb separated by a unitary operator C on lib, as 
shown in Fig. 1101 whose matrix elements are 

(g\C\f)=i(g,g~ 1 f)c(g- 1 f). (45) 

An equivalent definition of C is 



(46) 



with R'(f) the result of replacing [i(g, f) with 7(3, /) 
in US}. 

The analysis in Sec. IIV Cl ean now be applied with 
F(/) in place of U(f), and c(/) taking the place of 
W(f). The counterparts of Theorems [3] and [S] are 
found in the following, the proof of which is straight- 
forward. 

Theorem 7. Let {U(f) (8 V(f)} be a projective uni- 
tary representation of a group G with a factor system 
{"f{f,g)}, let the irreducible representations for this 
factor system be {D^ (/) : A = 1, . . . , k}, and let hi 
be defined in the double unitary form (|43|) . Then 
(a) The following three statements are equivalent: 

(i) The operator C defined in (|45|) is unitary. 

(ii) The c(f) are given by 



^(/) = E|EK ) (/) 



K 



(A) 



(47) 
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FIG. 10. "Effective" circuit for implementing the unitary U = £^ c (f)U(f) <8> V(f), obtained by choosing a special 
construction for the M box in Fig. [9] 



for some collection {1Z^}, where each 1Z^ is a 
d\ x d\ unitary matrix, with al\ the dimension of 
the irreducible representation X. 
(Hi) The c(/) satisfy 

E^(/'5)c*(/)c(/.g) - 5(e,g), V.g e G, (48) 
/ 

where 5(e,g) is 1 if g is the group identity e and 
otherwise. 

(b) Each of the three statements in (a) implies that 
Lt is unitary and that the circuit in Fig. [3J with the 
M gate replaced by the V , and C combination 
as shown in the middle part of Fig. \1(A will carry it 
out. 

(c) IfU is unitary and the U (f)®V (f) are linearly 
independent, then all three statements in (a) hold. 

(d) IfU is unitary and the U (f)<8>V (/) are linearly 
dependent, so the c(f) are not uniquely determined 
by (|43p . there exists at least one choice for the c(f) 
such that the statements in (a) are correct. 

Note that U and the 7Z^ are related through 

K Tlx 

A=l))=l I 

which is similar to the relationship between U and 
the Q( A ' in (|4T)|) , except that the Pi can be projectors 
onto entangled subspaces, since the r(/)'s act on 
both "Ha and Hb- 

To better understand what is meant by a matrix C 
in the form ([43]) , consider the case of a trivial factor 
system j(g, h) = 1. Then all rows of the C matrix 
are permutations of each other, generalizing the no- 
tion of a circulant matrix (and thus called "group 
circulant" in [HI). It can be shown that unitarity is 
assured if one row, say the first, is normalized and 
also orthogonal to all the other rows. The same is 
true in the case of a nontrivial factor system, but 
now the orthogonality equations contain some ad- 
ditional phase factors. Finding examples of collec- 
tions c(/) satisfying (|48j) . or equivalently resulting 
in a unitary matrix (145| is not a trivial problem, 



which makes their representation through the in- 
verse group Fourier transform ([47)) of some interest. 
For example, if G is an Abelian group with triv- 
ial factor system, the irreducible representations are 
all one-dimensional phase factors and the c(/) are 
transforms of these phases; for a cyclic group this 
is just the usual Fourier transform. Some examples 
are given in Sec. [Vj 

The Schmidt rank of U in the double unitary 
form (|43p obviously cannot exceed the number of 
linearly independent U(f) or the number of lin- 
early independent V(f); in each case this is deter- 
mined, Theorem 21 by which irreducible representa- 
tions are present in the representation. In addition, 
the Schmidt rank cannot be larger than the number 
of nonzero c{f). 

E. Relationship to controlled unitaries 

A bipartite controlled unitary © can always be 
converted to a group unitary by defining 

JV-l 

U(j) = u 3k Pk, oo := exp[27rf/JV], (50) 

k=0 

with [7(0) = / and U(j)U(J') = U(j+f), addition 
modulo N, thus a representation of the cyclic group 
of order N. By inverting the transform in (|50p the 
Pk can be written as linear combinations of the U (j), 
allowing (|9]) to be rewritten in the form (fT8|) . Since 
in this case G is cyclic of order TV, it is evident that 
the two protocols require the same entanglement and 
communication resources. Figure [11] is the counter- 
part of Fig. [9] for this case: the M gate consists of a 
Fourier transform and its inverse following and pre- 
ceding a controlled-^ gate. 

Since the projectors Pk in (|50[) commute with each 
other, the same is true of the U(j), and this suggests 
that if the U(f) in a group-unitary protocol (|18p 
commute with each other it might be possible to re- 
alize the same U using a controlled-unitary protocol. 
This is indeed the case, for if the U (/) commute with 
each other one can choose an orthonormal basis of 
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FIG. 11. Reduced diagram for implementing controlled unitaries using the protocol in Sec. HVBl 



Ha in which they are simultaneously diagonal. This 
means that only one-dimensional irreducible repre- 
sentations occur in the expansion . Noting that 
there may be repeated (but equivalent) irreducible 
representations, it then becomes obvious that one 
can write 

£/(/) = $>W)P A) (51) 

A 

where Pa projects onto the subspace corresponding 
to the X th irreducible representation in the nota- 
tion of (|33p. and with real phases </>(A, /). Upon 
inserting (|5ip into the group-unitary ([18]) one ar- 
rives at the controlled form of U with the sum 
over j replaced by a sum over A. Since the number 
of its one-dimensional inequivalent irreducible (pro- 
jective) representations cannot exceed the order of 
a group, it is then clear that the controlled-unitary 
protocol requires no greater resources than the origi- 
nal group-unitary protocol, and possibly less. But if 
it requires less it can always be converted back into 
a different, more efficient group- unitary protocol by 
the procedure indicated previously. 

In summary, group unitaries in which the U(f) in 
(TT5)) commute with each other can be converted into 
controlled unitaries and vice versa, with the same 
requirement of resources to carry out the protocol. 
If the U (/) do not commute then the group-unitary 
protocol must be used, though it is conceivable that 
U might be realized using the controlled-unitary pro- 
tocol in a completely different way. 



V. EXAMPLES 
A. Unitaries based on operator products X p Z q 

If two unitary operators X and Z satisfy the al- 
gebraic conditions 

X n = Z n = I, XZ = loZX, lo = e 27 ™/™, (52) 

for some integer n > 2, the n 2 unitaries 

U(p,q)=XPZ«, 0<p,q<n-l, (53) 



form a projective representation, 

U(p, q)U(p', q') = u~^U(p + p , ,q + q'), (54) 

of the Abelian group G of order n 2 formed by 
component-wise addition mod n of integer pairs 
(p, q), where addition on the right side of ([54"]) is 
to be understood as mod n. In other words, G is 
the direct product of two cyclic groups of order n. 

If X and Z in (|52"|) are the operators earlier defined 
in (|lll) . and n = cLa the dimension of Ha, the uni- 
taries in ([53]) form a basis of the space of operators 
on Ha, and thus any bipartite unitary on Ha ®Hb 
can be written in the form 

U = Y J U{ P ,q)®W(p,q) 1 (55) 
p,q 

with the expansion coefficients W(p, q) operators on 
Hb- As this is of the group form (TIE)) with linearly 
independent U(p,q) it follows from Theorem [5] that 
it can be implemented by our protocol, i.e., a circuit 
of the form shown in Fig. [8] using a maximally en- 
tangled resource state of Schmidt rank d\. This is 
precisely the same entanglement cost as needed to 
teleport the A state to B and back again, so there is 
no advantage over teleportation. However, it shows 
that the protocol of Sec. II VI for nonlocal unitaries is 
as general as teleportation. 

If, on the other hand, IA can be written in the form 
(|55[) for some n smaller than either cLa or ds, it can 
be carried out by our protocol using less entangle- 
ment than teleportation. A simple example of the 
double unitary type, (|4*31 . 

p,q v,i 

(56) 

takes the explicit form 

U =c(0, 0)1® I + c(l, 0)X ® X+ 

c(0,l)Z®Z + c(l,l)XZ®XZ (57) 

when n — 2. Here the T(p, q) commute with each 
other and form an ordinary representation of the 
four group Z?2- The c(p,q) are given by (|4"T|) . where 
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the corresponding to the four irreducible rep- 
resentations are complex numbers of magnitude 1. 
Thus the collection of all possible coefficients can be 
parametrized in the form 

c(p, q) = [e M + {-lfe lf) + (-1) V 7 + (-l) p+q e tS }/4. 

(58) 

(It may be noted that in the case cIa = ds = 2, (|57|) 
is the most general two-qubit unitary up to local 
unitaries; see (33[, which in its Eq. (4.3) provides an 
alternative representation of the c(p, q) coefficients.) 
For n > 3 the T(p, q) in (|56p no longer commute 
with each other, so they form a projective repre- 
sentation of G. The coefficients c(p, q) can again 
be parametrized using (|47l) . with appropriate irre- 
ducible representations, in terms of unitary matrices 



B. Unitaries based on S3 (-D3) 

The nonabelian group S3 of order 6, permutations 
of three objects, is isomorphic to the dihedral group 
-D3 . We need only consider ordinary representations 
of this group, since all factor systems are equiva- 
lent to the trivial case n(f,g) — 1; see Sec. 12.2 of 
[3^]. There are three inequivalent irreducible rep- 
resentations: A = 1 (identity) and A = 2 are one- 
dimensional, and A = 3 is two-dimensional. We omit 
the specific form of the representation matrices as 
that is not needed in the discussion below. 

The simplest interesting application to nonlocal 
unitaries occurs for two qutrits, <1a = ds = 3, with 

U(f) = D^(f)(BD^(f). (59) 

One could replace in this formula with 

without altering anything significant in the follow- 
ing discussion. Any VI which can be written as the 
direct sum of a 3 x 3 and a 6 x 6 block, using an 
appropriate decomposition of I a in terms of the Pi 
introduced in (|40p. can be carried out by our pro- 
tocol using a maximally entangled state of Schmidt 
rank 6, entanglement log 2 6 (e-bits), so at a lower en- 
tanglement cost than the log 2 9 needed for two-way 
teleportation. As there are five linearly independent 
[/(/), Theorem |4l the maximum Schmidt rank of 
such a unitary is 5, a conclusion that also follows 
from the fact there are five distinct blocks B {x ^ of 
the form ((32). This will be the typical Schmidt rank 
if the two blocks Q^ 2 \ Q*- 3 -* making up U are ran- 
dom unitaries. Quite simple examples with Schmidt 
rank 5 are easily constructed. Here is one where the 
3x3 blocks of (l42l that make up U contain mostly 
zeros, so can be conveniently written using dyads: 

B (2ii) =J) S (3U) = |i)(i| + | 2 )(2|, £?( 312 ) = |3)(2|, 

B (321) = |2)(3|, B (322) = |1)(1| + |3)(3|. (60) 



One can also construct unitaries of the double uni- 
tary form (|43l) . for example, with identical represen- 
tations on two systems of equal dimension: 

u = J2 <f) u(f) ® u(f) = c(/)r(/). (6i) 
/ / 

Since the F(/) and U(f) form representations of the 
same group, sets of possible coefficients c(/), some 
of them shown in Table U can be generated us- 
ing formula (j47| . with the 7Z^ on the right side 
of this equation arbitrary unitaries that serve to 
parametrize the possible c(/). The Schmidt rank 
cannot, of course, exceed 5, and this can be achieved 
both with six and with five of the c(f) nonzero. 
As any five of the U(f) are linearly independent, 
the Schmidt rank is equal to the number of nonzero 
c(/)'s when the latter is five or less. 



e 


(123) 


(132) 


(12) 


(23) 


(13) 


SR3 


SR 4 


2/3 


-1/3 


-1/3 


-1/3 


-1/3 


-1/3 


5 


6 


2/3 


1/6 


1/6 


-*A/3 


i/2V3 


i/2V3 


5 


6 


1/3 


1/3 


1/3 


1/V3 


-1/V3 





5 


5 


1/6 


-1/3 


-1/3 


-i-v/3/2 








4 


4 



TABLE I. The rows are four different sets of coefficients 
c(/), for the group elements / of S3 on the top line, that 
yield a unitary U in (|61[) . The last two columns give the 
Schmidt ranks SR3 and SR4 of U for cLa — dg = 3 and 
d A = d B = 4. 

Examples with dA — 4 where the 

U(f) = 8 rt 2 \f) ffi rt 3 \f) (62) 

contain all three inequivalent irreducible representa- 
tions are also easy to construct. In this case the U(f) 
are linearly independent so Li may have a Schmidt 
rank of 6. Whatever the size of ds the protocol only 
requires an entanglement of log 2 6, so it is more ef- 
ficient than two-way teleportation for ds > 3. Here 
is a collection of simple 4x4 blocks, see (|42|) . that 
yields U with a Schmidt rank of 6 when ds = 4. 

B (ui) = j 3(211) = + |2)(2| _ |3)(3| _ |4)(4|j 

i3( 311 ) = |l)(l|-|2)(2|, J B( 312 ) = |3)(1| + |4)(2|, 

= 1 1> <3| + |2)(4|, = |3> <3| - |4)(4|, 

(63) 

One can also construct examples of the type (|rJT|) 
with the c(/) determined in the same manner dis- 
cussed earlier, in particular the four possibilities 
shown in TableU] Now, however, the Schmidt rank is 
simply the number of nonzero c(/), consistent with 
the last column of the table. 
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C. Unitaries based on projective 
representations of D4 

The nonabelian dihedral group D4 of order 8 is 
of interest in that in addition to ordinary represen- 
tations it also has projective representations with a 
nontrivial factor system. Corresponding to the or- 
dinary representations there are five inequivalent ir- 
reducible representations with dimensions 1, 1, 1, 1, 
and 2. Analyzing nonlocal unitaries based on these 
is a problem similar to that discussed earlier in the 
case of S3 (-D3). The nontrivial factor system gives 
rise to two inequivalent irreducible representations, 
each of dimension 2, on which we now focus our at- 
tention. 

The simplest situation of interest is one in which 
<1a = 4 and 



U(f) = D^(f)(SD^(f), 



(64) 



is the direct sum of the inequivalent projective repre- 
sentations just mentioned. Then using a fully entan- 
gled state of Schmidt rank 8, entanglement of log 2 8, 
our protocol can carry out any nonlocal unitary hi 
of the form Q^ 2 \ 00]), where each block Q (A > 
is a 2cIb x 2de matrix. 

A simple example for ds = 3 is provided by the 
following collection of block matrices, see (|42l) : 



B( m )=|l)<l| + |2)<2|, B^ = |3)(1|, 
B (121) = |1)(3|, 5 (122) = |2)(2| + |3)(3|, 
B< 211) = |1)(1| + |3)(2|, B (212) = |2)(1|, 
B {221 ^ = |2)(3|, 5 (222) = |1)(3| + |3)(2|. (65) 

Another example, now for ds = 4, uses the 4x4 
block matrices: 



B< 1U > = |1)<1| + |2)<2|, i?( 112 > = |3)(l| + |4)(2|, 
5(121) 

5(211) 

5(221) 



|1)(3| + |2)(4|, B^ 
|1)(1| + |3)(3|, B< 212 > 
|1)(2| + |3)(4|, B< 222 > 



= |3>(3|-|4)(4|, 

= |2)(1| + |4)(3|, 

= |2)(2| + |4)(4|. 

(66) 



The unitaries hi for both these examples have a 
Schmidt rank of 8. Note that even for ds = 3 the 
entanglement cost of the protocol, log 2 8, is less than 
two-way teleportation of the qutrit from B to A and 
back again. One expects that in the generic case uni- 
taries of this type will have Schmidt rank 8, e.g., if 
they are chosen randomly subject to having the ap- 
propriate block structure, though of course smaller 
Schmidt ranks can also occur. 

It is also possible to construct unitaries of the form 
(I6T1) using the U(f) in (|64|). Again all possible sets 
of c(/) can be generated using formula (|4"7|> . but it 
is important to notice that the T(/) = U{f)® U(f) 



form a representation with a factor system equiva- 
lent to the trivial factor system, and which can be 
made trivial by choosing appropriate phases for the 
projective representation matrices on the right side 
of (f64|) . Consequently, the that appear on the 
right side of (|47l) are the five ordinary irreducible 
representations of -D4, while the TZ^' in this formula 
are arbitrary complex numbers of unit magnitude for 
A = 1, 2, 3, and 4, and an arbitrary 2x2 unitary 
matrix for A = 5. 



VI. SUMMARY AND CONCLUSIONS 

Our central result is the protocol in Sec. IIVI which 
permits a unitary hi of the group form (|18[) to be 
implemented nonlocally provided the U(f) form a 
projective unitary representation ([!§]) of a group G, 
and the W(f) satisfy the condition (|41l) . Since the 
unitarity of hi guarantees the existence of a suitable 
set of W(f) even when the U(f) are not linearly in- 
dependent, Theorem [5j the problem of constructing 
an efficient scheme using our protocol comes down 
to minimizing the number of terms in the sum (|18[) , 
the order N of the group G, a task accomplished 
in [4l| . This is because the protocol requires a uni- 
formly entangled state of Schmidt rank N (entangle- 
ment equal to log 2 N) , and 2 log 2 N bits of classical 
communication, log 2 N in each direction. 

An expansion of the group form (|18[) is possible for 
any bipartite unitary hi, since if dA is the dimension 
of Ha it is always possible to choose a representation 
of G that is a basis of d 2 A unitary operators for the 
operator space of Ha as discussed in Sec. IV Al While 
our protocol works in this case, the required entan- 
glement and communication resources are exactly 
the same as those required to teleport the quantum 
state of A to the location of B and back again. Thus 
there is no gain in efficiency over simple teleporta- 
tion, but on the other hand there is also no loss in 
generality: our protocol can be used for any bipar- 
tite unitary at a cost no greater than teleportation. 

Thus what makes our protocol of some interest 
from the point of view of efficiency is the existence 
of special unitaries hi for which the number of terms 
in the group expansion (|18|) is smaller than d Al as 
illustrated by the examples in Sec. [Vj These spe- 
cial hi are, to begin with, characterized by certain 
algebraic properties of the summands in ([9]) or (|18p , 
properties which, in contrast to teleportation, make 
no direct reference to the dimensions of either Ha or 
Hb- Hence our examples can be realized in a large 
number of ways on spaces of different dimensions, 
and in the case of large dimensions the savings over 
teleportation can be substantial. 

A second useful characterization of these special 
unitaries is their Schmidt rank, which is obviously 
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a lower bound on the number of terms in (TB)) , thus 
a lower bound on the order of the group and the 
amount of entanglement required for our protocol. 
Furthermore, Theorem [2] indicates there is a similar 
lower bound for any other protocol based on prior 
entanglement and classical communication, at least 
in terms of the Schmidt rank of the entangled re- 
source. The Schmidt rank of a nonlocal unitary on 
Ha ®Hb will typically be the minimum of d\ and 
d 2 B , and only if a unitary has a Schmidt rank less 
than this can our protocol hope to be more efficient 
than teleportation. 

A third requirement, not at all trivial, that must 
be met if a bipartite unitary is to be efficiently real- 
ized using our protocol is that it must possess a block 
diagonal form for an appropriate basis choice on one 
side — Ha in our discussion — a form commensurate 
with the structure of irreducible representations of 
an appropriate group, in the manner discussed in 
Sec . II V Cl and illustrated in some examples in Sec.lVl 
The requirement is slightly less stringent than ap- 
pears at first sight, since initial and final local uni- 
taries might be used to place U in the appropriate 
block form. Obviously, more study is needed in or- 
der to give a precise characterization of the class of 
unitaries that can be efficiently realized by our pro- 
tocol. 

Our protocol requires a fully or uniformly entan- 
gled state, one with N equal nonzero Schmidt coef- 
ficients. Could one instead make efficient use of a 
partially entangled state of the same Schmidt rank 
in a deterministic protocol of the sort we have been 
considering? This would be consistent with Theo- 
rem [5] if the entangling strength of the unitary were 
not too great. But even in the simplest case of a uni- 
tary on two qubits the answer is not known (at least 
to us) ; all published protocols that use an entangled 
state of Schmidt rank 2 require a fully entangled 
state, even if the entangling strength of the unitary 
is very small. Is there some principle of quantum in- 
formation that requires the use of a fully-entangled 
state? Nondeterministic protocols or those which 
use an entangled state of higher Schmidt rank are 
another matter: for some interesting results in this 
connection see jl7j |. 

We have introduced some information theoretical 
considerations in Sec. Ill CI and subsequently seen in 
Sees. IIIII and HVl how those can motivate or provide 
reasons for the choice of certain parts of the quan- 
tum circuit, and also a picture of how information 
contained initially in the A system can be used to 
influence the B system without leaving an unaccept- 
able record in the ancillary systems. One suspects 
that similar considerations might lead to additional 
insights into the functioning of other efficient proto- 
cols. Teleportation physically transports all of the 
A information to the distant laboratory. A more ef- 
ficient protocol seems possible only if not all of this 



information is really needed for the desired unitary, 
and the part which is needed can somehow be sepa- 
rated out and transferred at less cost than full tele- 
portation. Making these ideas precise and quantify- 
ing them could be useful in designing better proto- 
cols, as well as clarifying what quantum information 
is all about. 
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Appendix A: Proof of Theorem [Tl 

It is obvious that (i) implies (ii) and (iii) in The- 
orem [TJ and that (iii) implies ^ with W times a 
constant in place of U. However, as J is assumed 
to be an isometry, W times this constant must be 
unitary, i.e., it preserves inner products of states \r) 
in %r. Thus (iii) implies (i), and to complete the 
proof we need only show that (ii) implies (i) or (iii). 
This follows from a quite general argument on in- 
formation location, the Somewhere Theorem of [lij , 
but can also be shown directly as follows. 

The absence of information from %$ implies that 
if we do a measurement on S in any orthonormal 
basis of Hs, the probabilities of measurement results 
will be independent of the input state \r). Consider 
measuring in the {|sj}} basis. The probability of the 
measurement outcome corresponding to \sj) 

Pr(j) = (r\K}Kj\r), (Al) 

is independent of |r), so KjKj is proportional to 
the identity Ir or, equivalently, Kj is proportional 
to a unitary operator (since Kj maps Hr to itself). 
But the same is true of any Kraus operator K% as- 
sociated with a different orthonormal basis of Hs- 
Thus given any two Kraus operators, say K\ and K 2l 
from the original set it follows that (K\ + K 2 ) / \/2 
and (Ki + iK 2 ) / V% must be proportional to uni- 
taries, and from the fact that K\K x , K\K 2 , (K\ + 
K 2 Y(K 1 +K 2 ) and [K x +iK 2 )^K! +%K 2 ) are pro- 
portional to Ir, we conclude that K[K 2 is also pro- 
portional to Ir, so K\ and K 2 are both proportional 
to the same unitary. By applying this argument to 
every pair one sees that the Kj are of the form spec- 
ified in (iii). 
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Appendix B: Proof of Theorem [21 

It is convenient to discuss the Schmidt rank and 
the entangling strength of hi by mapping them onto 
properties of an entangled ket |f2) in the following 
manner. Define 

|n ) = |«a) ® e H AA ®H BB , (Bl) 

where 7^ and 77 g are auxiliary systems isomorphic 
to Ha and 77_b, and 

|n) = («®/ Ifi )|n >. (B2) 

If \u) a ) oc \l) and likewise are maximally 

entangled states on H AA and H B §, the Schmidt 
rank of on 77^,4 ® HbS 1S equal to that of hi by 
the following argument. The latter can be defined 
as the number of (nonzero) terms s in the Schmidt 
operator decomposition 

s 

U = y £ J A j ®B i , (B3) 
3=1 

satisfying the operator orthogonality conditions 

Tr A (A] A k ) = = Tr B {B]B k ) for j ± k. (B4) 
Inserting (lB3t in (|B2|> yields 

|fi) = ^(A/ ® I A )\u] a ) <8> (Sj ® Jb)|w^). (B5) 

3=1 

Given that |w Q ) and jw^) are fully entangled it fol- 
lows that the inner products of kets of the type 
(Aj ® I A )\u! a ) for different j coincide with the oper- 
ator inner products Ti^AjA^) aside from normal- 
ization. Thus (|B5I) is a Schmidt decomposition and 
the Schmidt ranks of |f2) and hi coincide. 

We are interested in simulating hi using the en- 
tangled resource |$) a & along with separable opera- 
tions (this includes LOCC). Thus there is a quan- 
tum operation {E m ® F m } with E m : H a A ~ > Ha, 
F m -HbB —>%b such that for any I^ab 

(E m ® F m ) (|$) ab ® = c m U\^) AB , (B6) 

where the c rn are complex numbers, and the 
Kraus operators satisfy the usual closure condition 

L( £ l £ ™ ® ^rL^m) = ^ii ® 4b- T nis ca n be ex- 
tended in an obvious way to include the auxiliary 
systems H A and 77 ^ so that 

(E m ® F m ) (|$) o6 ® |Q >) = c m \Q), (B7) 

with 7? m = E rn ® 7^ and F m = F TO ® 7^. The 
Schmidt rank of |$) ® |fio) on 77 aj4j 4 ® 77 bB s is the 



same as |$) on 77 a <8>77&, and multiplying the former 
by the product operator 7J m ® F m cannot increase 
it. Thus the Schmidt rank of cannot exceed that 
of 1$). This includes the case discussed previously 
in which the Schmidt rank of |f2) is equal to that of 
hi. Hence the latter cannot exceed the Schmidt rank 
of |$). 

The proof of the second part of the theorem uses 
the fact that a separable operation applied to a pure 
state cannot increase the average entanglement, see 
(v) in Sec. Ill of (42[, and as the entanglement of 
|$) ® |fi ) on H aAA ® H bB §, for any choice of \w a ) 
and \u)p) in (|B1|) . is the same as |$) on 77 a <8>7/f,, the 
entanglement of on H AA ® H B b, and hence the 
entangling strength of hi, cannot be greater than the 
entanglement of |$). 

Appendix C: Group Fourier transform 

See [43j], pp. 615, for a compact discussion of the 
group Fourier transform and references to the liter- 
ature. The Orthogonality Theorem for group rep- 
resentations, which applies to projective as well as 
ordinary representations (e.g., [39|], P- 274), states 
that 

(dx/\G\)J2 D \k(f) D %hfT = <W%'<W, (CI) 
/ 

where is the unitary matrix representing the 

group element / in the irreducible representation 
A; note that all these representations belong to the 
same factor system. Now (|C1|) is equivalent to the 
assertion that D(K,f), with K = (A,j, fc), defined 

by 

D(KJ) = y/dtf\G\D(K,f) = y/dJ\G\D$\f), 

has orthogonal and normalized rows, thus is a uni- 
tary matrix. Consequently it is nonsingular (and the 
same is true of D(K, /)), and its inverse is the ma- 
trix £>(/, K)*. This allows one to invert flSSJ) after 
multiplying both sides by y/d\/\G\, and the result 
is (|39l). 

Appendix D: Proof of Theorem l5l 

Before proving the theorem, we first prove that 
the 7?(/)'s defined in (|3"Tj) form a projective repre- 
sentation of G. This can be easily checked: 

R(f)R(g) = J2»(hJ)»(k,g)\h){hf\k){kg\ 

h,k 

= fMhf, g)\h) (hfg\ = fx(f, g)R(fg), 

h 

(Dl) 
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where the final equality is a consequence of the as- 
sociative rule 

H{h, fMhf, g) = fg)n(f, g). (D2) 

for the factor system. [See, e.g., Ch. 12 of [39l ] . 
where R(f) is identified as the projective regular rep- 
resentation.] What is important for our purposes is 
that, just as in the case of ordinary representations, 
it contains each inequivalent irreducible representa- 
tion A of G a number of times equal to d\. 

Our proof of Theorem [5] begins with the connec- 
tion of (iii) in (a) to (b) and to (c). From (JT5J and 
(|2"D]| it follows that 

W f W = ]T »*{f,9)U{g)®W{rtW{fg). (D3) 
f,gea 

Thus if the W(f) satisfy flUJ), WU = 17(e) ® 7 B = 
7^i ® Ibi and 7/ is unitary. On the other hand, if 
the U(f) are linearly independent, for every g the 
coefficient (an operator oxi 1-Lb) of J7(<?) on the right 
side of (|D3[) is uniquely determined by the left side, 
so the unitarity of hi implies (|41[) . 

The proof of (a) , (b) , and (c) will thus be complete 
once we show the equivalence of the three statements 



in (a). The equivalence of (i) and (iii) follows from 
([30f upon replacing hi in the preceding argument by 
M and U(f) by R(f), and noting that the R(f) are 
linearly independent, since for each / the right side 
of (|3ip involves a unique set of dyads. That (i) im- 
plies (ii) comes from noting that with U(f) replaced 
by R(f) in the discussion in Sec. IIV CI M can be 
written in the form (1401) . and the unitarity of each 
Q( A ' is a consequence of the unitarity of M. Thus 
the W(f) are indeed given by (|3"9"]l for a collection 
of unitary . Conversely, if (|3"9")l holds for some 
collection of unitary Q^ x \ then M expressed in the 
form (|40p will be unitary, so (ii) implies (i). 



To prove (d), note that by Theorem [4] if the U(f) 
form a dependent collection, some of the irreducible 
representations must be missing, and thus hi deter- 
mines, through (|40[) . unitary matrices for only 
some values of A. But we can choose arbitrary uni- 
tary matrices for the remaining values of A without 
changing hi, and use the resulting collection to 
define a set of W(f) operators by means of (|3"9"|) . 
As this set satisfies condition (ii) of part (a) of the 
theorem, it satisfies (i) and (iii) as well. □ 
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